
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json)
Hash identifier: WO0X+LlXp46liePGBP75uBN1QveiNlxd+UC1nT+IWck=
Subject key identifier: 65:2C:8E:67:72:DE:ED:93:20:C9:5B:9A:8D:78:B0:01:5D:76:28:86
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
Manifest number: 01F2
Signing time: Sat 13 Jun 2026 03:32:36 +0000
Manifest this update: Sat 13 Jun 2026 03:32:35 +0000
Manifest next update: Sat 20 Jun 2026 03:32:35 +0000
Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: IdmmH7U4hPqVhWvu0xVYLc4GwPiL88gJv34cQoGDgiQ=)
2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: Wwr1Eqq/L0YHNdQH3zpO8YtN+8gSRENMy82vCTfRXz8=)
3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: 4fKiOKauzOW+Tltjqnic8gI8N5qp2KLhMHqhuZ8QyQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Validity
Not Before: Jun 13 03:32:35 2026 GMT
Not After : Jun 20 03:32:35 2026 GMT
Subject: CN=6a2ccf54-42b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:c5:b5:0b:bc:a4:bb:e3:16:15:d8:47:b1:
e0:29:fc:d4:80:22:9b:ac:5a:a4:5b:6e:49:f8:7a:
9c:4e:27:ae:1a:5b:38:39:0f:de:ad:d6:b1:71:84:
4b:ee:92:0d:e7:6e:96:b3:12:85:4b:e5:bb:2a:e0:
e5:09:c3:a9:82:7f:f6:10:2f:75:ff:28:8e:fd:b4:
a2:06:a8:3c:d3:6a:6c:76:3f:c8:cd:77:e3:89:e3:
14:8c:04:6d:ef:1a:1a:73:6f:10:85:99:45:34:bc:
d1:4c:58:e1:1d:04:9b:d0:b8:89:4c:97:23:81:9e:
81:a6:f4:86:cf:9d:e4:5c:32:80:cb:ca:d9:d7:0a:
dd:63:1f:8f:2e:f2:fd:75:51:6f:bc:e1:7d:f6:57:
70:86:4d:83:43:f8:21:db:e2:c7:26:69:a0:d0:ec:
c2:63:75:eb:3e:e4:23:b1:c0:fa:92:d9:f7:2a:22:
ce:eb:38:42:22:25:9b:69:17:65:6b:ce:2e:aa:c8:
3d:d3:83:df:4f:d8:5f:75:ab:81:1c:fe:2b:f6:41:
ab:f9:43:06:84:ca:a2:6b:7f:28:1c:97:0a:82:18:
fa:6f:49:29:d4:5c:2f:17:50:f1:1b:c0:63:76:82:
d8:83:7b:86:74:e9:48:f9:6a:e4:56:7f:d9:04:4b:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:8E:67:72:DE:ED:93:20:C9:5B:9A:8D:78:B0:01:5D:76:28:86
X509v3 Authority Key Identifier:
keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:c6:4b:8c:14:c2:0b:eb:bc:56:45:d8:65:2a:01:94:02:
29:99:14:73:b0:4a:e4:4c:6c:47:08:5d:61:72:cc:fd:7b:73:
7e:94:e8:45:0a:6e:d6:15:d4:31:be:9f:a4:7b:9d:f4:c2:be:
5b:0d:62:82:10:06:05:d8:75:cc:c2:d2:83:6d:e0:4a:45:a0:
a2:14:a1:a3:f3:03:b0:27:cf:44:cc:ba:30:e2:cd:93:4d:36:
d9:31:e7:c9:5c:6f:26:5d:b2:74:5f:7e:68:3d:d2:52:d9:13:
0a:76:9a:2a:fd:78:b4:64:75:b8:63:9e:f8:3b:2a:d2:10:fa:
d1:fa:85:43:34:64:04:f7:a7:55:71:1d:0e:26:ec:0d:eb:22:
af:35:71:c5:dd:d3:46:d8:8c:36:19:40:61:9a:f0:ae:c8:77:
81:67:6e:84:58:2b:d7:5d:9e:27:d8:64:e4:ee:6c:03:5d:03:
5a:39:e6:f8:f8:51:4e:a0:24:c9:81:7d:b7:e2:71:0c:ce:04:
a3:c6:5a:e7:f4:f5:8e:83:e1:04:fe:dd:fa:16:92:09:41:8a:
c5:39:2b:57:14:a2:8d:cd:c8:00:30:f6:dc:2f:c4:7b:74:fd:
15:d7:a3:71:b7:09:4d:41:3a:54:18:9c:33:a0:de:0e:96:0f:
ee:fe:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:29 2026 by rpki-client